RSS Reader

Browse stored RSS items across subscribed feeds. Filter by feed title or URL, and narrow results by entry title.

More phishing messages via Booking.com and Novotel
https://shkspr.mobi/blog/2026/10/more-phishing-messages-via-booking-com-and-novotel/

A few days ago I booked a Novotel hotel on Booking.com - two days later I received these phishing messages via WhatsApp. Both knew my exact name, phone number, location of stay, and date of stay. Luckily, both were fairly inept. Let's take a quick look at them. The first came from a Portuguese business account. Obviously the name doesn't match that of the large chain hotel I booked with. The …

Spring Modulith 2.2 RC1, 2.1.2, 2.0.9, and 1.4.14 released
https://spring.io/blog/2026/10/23/spring-modulith-2-2-rc1-2-1-2-2-0-9-and-1-4-14-released

On behalf of the community, I am excited to announce the availability of Spring Modulith 2.2 RC1, 2.1.2, 2.0.9, and 1.4.14. The bug fix releases primarily ship the usual dependency upgrades, plus a number of fixes to the event publication registry that have been ported back where applicable. The release candidate rounds off the 2.2 feature set on the road to GA. A few of the user-visible improvements since 2.2 M1 include: Event completion now happens within the listener's transaction by...

Spring Boot 4.0.9 available now
https://spring.io/blog/2026/10/23/spring-boot-4-0-9-available-now

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 4.0.9 has been released and is now available from Maven Central. This release includes 99 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests. How can you help? If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on...

Spring Boot 4.2.0-RC1 available now
https://spring.io/blog/2026/10/23/spring-boot-4-2-0-RC1-available-now

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 4.2.0-RC1 has been released and is now available from Maven Central. This release includes 113 enhancements, documentation improvements, dependency upgrades, and bug fixes. Notable new features include: The default Buildpacks builder is now paketobuildpacks/ubuntu-resolute-builder, based on Ubuntu 26.04. spring-boot-properties-migrator can now fail the application on errors or warnings. Startup...

Spring Boot 4.1.2 available now
https://spring.io/blog/2026/10/23/spring-boot-4-1-2-available-now

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 4.1.2 has been released and is now available from Maven Central. This release includes 126 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests. How can you help? If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on...

Release Notes for Safari Technology Preview 255
https://webkit.org/blog/18482/release-notes-for-safari-technology-preview-255/

Safari Technology Preview Release 255 is now available for download for macOS Golden Gate and macOS Tahoe.

DE STAAT - FREEDOM (Official Music Video)
https://simonwillison.net/2026/Oct/22/de-staat-freedom/

DE STAAT - FREEDOM (Official Music Video) OK well this is a first for me... at 00:44 in this new music video by Dutch alternative rock band De Staat: The visual effects are credited to Matties Grooten of Fake it or Leave it. Via flir on Hacker News Tags: music, ai, generative-ai, pelican-riding-a-bicycle

Donating Agent Skills to the Agentic AI Foundation
https://simonwillison.net/2026/Oct/22/donating-agent-skills/

Donating Agent Skills to the Agentic AI Foundation News today from Anthropic: We’re committed to keeping Agent Skills open, community-driven, and vendor-neutral. Today, we are donating the standard to the Agentic AI Foundation (AAIF) under the Linux Foundation, which we co-founded with Block and OpenAI last year, and to which we donated the Model Context Protocol (MCP). I'm pleased to note I called this one last December, when Anthropic first declared skills to be an "open standard": I...

Security Update on PHP2Shell: Impact for Docker Customers
https://www.docker.com/blog/security-update-on-php2shell-impact-for-docker-customers/

On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, commonly known as PHP2Shell.

Alberto Denia: Code is Clay Now
https://bytecode.news/posts/2026/10/alberto-denia-code-is-clay-now

Alberto Denia's artisan and engineer are a good lens on agentic coding: an artisan keeps his fingers on the code, and an engineer relies on the factory to make bricks. Both work, at different scales.

Eight more TLDs now eligible for a free domain with Pro
https://vercel.com/changelog/eight-more-tlds-now-eligible-for-a-free-domain-with-proundated

Every Pro team can claim a free domain for one year. That offer now includes .co, .studio, .company, .info, .pro, .live, .digital, and .agency, bringing the eligible TLDs to sixteen. The offer still covers one domain per team, and premium domains are not eligible. After the first year, your domain will renew automatically at the regular price shown at checkout when you claim it. Claim yours at vercel.com/domains, and see the free domain FAQ for the full list of eligible TLDs and terms. Read more

Quoting Armin Ronacher
https://simonwillison.net/2026/Oct/22/armin-ronacher/

As fun as AI is, we built so much bad software over the last 30 years, and now the universe is punishing us for our sins. — Armin Ronacher Tags: security, generative-ai, armin-ronacher, ai, ai-security-research, llms

Air Governance: Manage AI Agents, Access, and Spend Throughout Your Organization
https://blog.jetbrains.com/blog/2026/10/22/air-governance-manage-ai-agents-access-and-spend-throughout-your-organization/

Today, JetBrains Air Governance becomes generally available. Formerly known as JetBrains Central, this is the organization layer of JetBrains Air, a system of products for agentic development. Air Governance gives you one place to manage which AI agents, models, and providers your teams use, set spending limits, and see what that usage costs and delivers. […]

Gadget Review: Mokin 17 Port USB-C Tower ★★☆☆☆
https://shkspr.mobi/blog/2026/10/gadget-review-mokin-17-port-usb-c-tower/

The good folks at Mokin have sent me their new USB-C hub and it is a beast. This is the MODK2403 - the latest in their line of high-tech USB-C docks. It does close to everything you could want and has an LCD monitor for showing the weather. Errr… What? OK, a quick product shots, then on to the specs. On to the ports: Triple display Either 3x HDMI or 1x HDMI and 2x DisplayPort 4x U…

Death to long-lived static credentials
https://vercel.com/blog/death-to-long-lived-static-credentials

Fifteen years ago, TLS was something you'd use to protect the most sensitive areas of your app. Then Google, Let's Encrypt, the EFF, and others led the push for HTTPS everywhere, making encryption the default for every request. Without it, anyone between the browser and server can read and tamper with the traffic. OAuth, OIDC, DBSC, and related standards already provide building blocks for secure authentication, but standards alone do not make secure methods the norm. HTTPS needed tooling...

Bun v1.4.4
https://bun.com/blog/bun-v1.4.4

Fixes 271 issues, addressing 544 👍. bun fmt, a Prettier-compatible formatter built into Bun that is 3x to 6x faster than oxfmt, bun check is 1.4x to 7.8x faster on large projects, bun install migrates Yarn Berry lockfiles, retries with exponential backoff and closes 133 issues, up to 3.2x faster hoisted installs from a warm cache on Linux, bun pm fetch, bun publish --recursive, packageExtensions, Bun.SQL uses up to 48% less CPU per query, query.cancel(), COPY streams, column name...

Spring Modulith 2.2 RC1, 2.1.2, 2.0.9, and 1.4.14 released
https://spring.io/blog/2026/10/22/spring-modulith-2-2-rc1-2-1-2-2-0-9-and-1-4-14-released

On behalf of the community, I am excited to announce the availability of Spring Modulith 2.2 RC1, 2.1.2, 2.0.9, and 1.4.14. The bug fix releases primarily ship the usual dependency upgrades, plus a number of fixes to the event publication registry that have been ported back where applicable. The release candidate rounds off the 2.2 feature set on the road to GA. A few of the user-visible improvements since 2.2 M1 include: Event completion now happens within the listener's transaction by...

A Bootiful Podcast: A Bootiful Podcast: Anton Arhipov on AI Development within JetBrains IDEs
https://spring.io/blog/2026/10/22/a-bootiful-podcast-anton-arhipov

Hi, Spring fans! In this episode, Josh sits down with longtime friend and JetBrains developer Anton Arkhipov for a fascinating look at how AI is reshaping the way software gets built. From the halls of Devoxx to the future of IntelliJ IDEA, the conversation explores how AI has moved from being a novelty to becoming a core part of modern development workflows. Anton shares how JetBrains is experimenting with a new “agent-first” way of working, where chat becomes the central interface and AI...

Spring Batch 6.1.0-RC1 and 6.0.6 available now!
https://spring.io/blog/2026/10/22/spring-batch-6

On behalf of the team and all contributors, I am pleased to announce that Spring Batch 6.1.0-RC1 and 6.0.6 are available now from Maven Central! These releases bring a number of new features, enhancements and bug fixes. For the complete list of changes, please check the release notes: 6.1.0-RC1 and 6.0.6. This blog post walks you through the major changes in 6.1.0-RC1: Dependencies upgrade @JobParameter annotation for injecting job parameters New PageableItemReader JsonLineMapper agnostic to...